
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/7385131C157A11F1A388FAFB3D3D8C67.roa
File: 7385131C157A11F1A388FAFB3D3D8C67.roa (raw, json)
Hash identifier: vklspRRd5iKi+EqvD4O+ToWckx6cWSzBe46wODutGYU=
Subject key identifier: DD:F5:1A:E9:24:67:2F:7C:E3:C7:55:63:9A:06:A2:DE:7E:B9:B0:39
Certificate issuer: /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial: 08E8
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/7385131C157A11F1A388FAFB3D3D8C67.roa
Signing time: Sun 01 Mar 2026 14:25:09 +0000
ROA not before: Sun 01 Mar 2026 14:25:09 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 834
IP address blocks: 103.94.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 14:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Validity
Not Before: Mar 1 14:25:09 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44c45-5a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1a:d2:28:36:b6:e9:94:c3:d9:83:9e:b9:d6:
68:4d:67:17:3e:bc:75:62:75:3c:4e:11:6a:9b:c8:
21:40:7d:64:78:f7:34:f5:41:32:29:6b:29:04:d9:
3b:04:cf:00:03:bc:59:c3:cf:e3:1b:12:bf:65:fb:
50:6b:02:20:fd:a2:ac:84:fa:bc:5d:f5:a1:f4:ad:
81:80:ab:35:ad:95:d7:ca:be:de:46:50:0c:c2:d0:
7b:d9:77:09:c9:54:f1:64:43:1d:fc:61:5d:35:2c:
11:b5:cc:63:30:96:f7:6f:a5:a8:cf:c8:a4:49:49:
39:1e:89:0d:a0:06:7d:95:95:75:b3:71:76:96:1f:
3e:f8:dc:20:4a:a6:91:af:e5:f9:61:bd:de:00:1e:
ac:21:ee:a9:6a:24:28:c0:09:b8:f6:e4:be:f9:d4:
b0:84:c5:e1:df:f6:60:ef:7e:12:97:86:db:c8:7a:
06:53:b5:a2:e1:6b:cc:09:85:f9:da:a0:3e:93:4b:
42:e9:da:59:6a:61:47:a0:29:4b:c1:28:42:68:90:
cb:36:12:4a:20:e6:87:8a:f0:3f:ea:0b:c4:b6:40:
f3:f6:a9:be:c6:07:41:b0:b1:f7:f8:a0:ec:19:46:
41:8c:49:b2:4b:65:a9:a0:02:61:d8:44:64:b5:f1:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F5:1A:E9:24:67:2F:7C:E3:C7:55:63:9A:06:A2:DE:7E:B9:B0:39
X509v3 Authority Key Identifier:
keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/7385131C157A11F1A388FAFB3D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
103.94.76.0/23
Signature Algorithm: sha256WithRSAEncryption
13:76:55:88:95:4d:82:1d:a6:df:a0:3f:c7:4c:26:72:72:b0:
58:61:dc:6b:f6:02:3b:01:bc:43:c0:b0:2e:89:26:1f:65:c7:
c6:77:16:ce:7f:8c:6f:47:d7:3c:a1:2d:8f:b6:48:93:3f:e8:
cb:79:81:b9:3c:ae:06:3c:a9:4a:5e:f4:69:14:1f:38:63:a4:
7b:e4:65:53:b3:ef:30:00:ed:36:9f:94:7a:8b:ec:89:0e:ad:
19:d5:94:cd:45:ce:3a:d2:f2:a8:f0:86:9b:ea:4e:b6:a9:6a:
30:19:30:90:4d:4a:19:f0:25:ff:33:4f:f7:68:ed:a5:12:c8:
4f:24:8a:6a:88:dc:59:38:a2:b1:ec:fb:c3:bc:10:50:89:27:
3b:8f:13:4a:d1:eb:50:bc:2d:12:34:56:da:63:f2:9f:3d:13:
02:9a:eb:39:8c:d4:b6:b4:74:0f:ea:75:6a:04:a3:18:a1:e3:
80:61:c5:20:b2:b9:72:7e:81:6e:83:93:5d:96:65:2b:2a:8d:
64:e2:8a:a1:7e:46:04:69:be:fb:c1:4b:c0:ef:80:23:69:ae:
5f:d3:cd:66:11:3f:d4:61:6e:7a:06:b9:37:91:99:90:ad:2a:
a5:98:a8:61:4d:eb:14:af:22:d9:91:33:bd:e2:87:c8:9a:db:
47:78:ad:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:19:23 2026 by rpki-client